Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer
File:                     49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer (raw, json)
Hash identifier:          UYyT2fQpHxf1LjBz0JTWBGmbdvir3AHZIFEfzhesVH0=
Subject key identifier:   49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       596BA95C2104507BD37DB161A568D7D0FA5BC3E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Feb 2025 19:53:30 +0000
Certificate not after:    Fri 20 Feb 2026 19:58:30 +0000
Subordinate resources:    AS: 270248
                          IP: 200.107.116.0/22
                          IP: 2804:6918::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6b:a9:5c:21:04:50:7b:d3:7d:b1:61:a5:68:d7:d0:fa:5b:c3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 21 19:53:30 2025 GMT
            Not After : Feb 20 19:58:30 2026 GMT
        Subject: CN=49172F1453C1D7F097787278D48BCC2D5FD3A3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:55:8d:69:2a:b9:92:b7:c3:0e:3e:bd:6a:
                    d6:45:82:47:7f:1f:18:13:b7:8b:e1:a0:c9:75:af:
                    5e:3f:c7:e7:c2:46:bd:b8:38:c9:b5:34:71:16:31:
                    ca:90:b6:55:ac:08:e1:15:62:02:9d:89:ad:4c:79:
                    4a:9b:a7:d7:46:80:46:e3:da:60:0d:d2:30:ce:c2:
                    78:a1:2e:b8:0c:c0:fd:6a:6a:45:2a:53:61:b7:89:
                    0a:80:7a:4c:a0:6d:3c:df:96:22:3a:87:7f:99:de:
                    92:02:fe:df:fd:7c:4a:07:2a:ee:a9:11:d2:d9:e7:
                    b1:8a:59:ec:36:f2:85:4e:f7:5c:15:a3:96:b8:d5:
                    3e:bd:06:17:48:06:c1:2f:89:6c:3e:e0:3e:9d:09:
                    62:98:b6:a2:ff:ae:6a:82:27:ba:bc:27:74:3b:b9:
                    a9:12:5b:a5:6e:71:16:50:ff:98:47:0c:8e:a9:b5:
                    45:57:4b:fe:19:ad:ba:89:a5:07:9a:82:a3:20:f7:
                    4f:24:28:00:df:cb:83:92:88:67:ce:16:59:ec:33:
                    be:95:cf:2f:e7:61:0f:74:aa:3e:7a:e2:97:8d:cf:
                    d5:f4:32:92:4d:21:ce:d0:b5:b9:93:cc:15:a2:10:
                    41:a6:8d:b0:52:9b:fd:26:86:50:d5:53:19:e7:28:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.116.0/22
                IPv6:
                  2804:6918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270248

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:36:79:89:c3:3a:25:95:f3:e3:6a:e7:c5:3b:af:e6:63:
         bd:ae:3d:68:2e:31:89:fe:1c:e3:88:ff:7c:bc:5d:a9:4b:da:
         3b:5f:6b:bc:07:70:b4:30:8a:70:74:ae:5f:1e:e9:14:77:83:
         64:2a:ba:46:8e:40:a1:ba:80:99:68:c8:15:81:9a:24:e1:2c:
         be:5a:e8:82:19:1b:cc:80:fb:8a:40:2a:52:de:25:63:07:ec:
         3d:8e:3d:12:81:d3:15:47:86:65:30:60:aa:be:44:d4:d8:a2:
         1b:0d:d1:65:7b:5b:70:a8:7c:45:66:e1:6a:79:24:8f:c3:83:
         78:98:b6:dc:b6:2f:77:42:89:63:dd:27:b3:10:4a:52:7b:03:
         c1:1e:2d:d8:af:24:04:a0:bb:e3:f9:29:7e:41:1c:2e:8e:28:
         86:a9:e8:25:e9:c2:86:88:10:d0:bc:3a:ce:e7:53:f4:40:0b:
         2e:2a:62:6d:26:75:a6:03:f5:60:05:e2:69:1f:4d:a8:1e:eb:
         0d:6e:76:dd:2a:6d:18:ed:4f:25:37:38:ba:dd:9b:3c:ee:71:
         af:0a:00:8a:9f:ea:53:6c:08:75:32:5c:a4:73:6c:67:a3:f4:
         8f:50:31:e2:ce:d7:ba:c3:85:3f:be:12:0d:e8:01:96:96:54:
         91:57:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:30 2025 by rpki-client